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(57) Abstract: 

PROBLEM TO BE SOLVED: To prevent an internal state 
of a certificate device from being revised due to a 
ticket exhibited by mistake or illegally. 

SOLUTION: An authentication information generating 
section 102 of an authentication device 100 generates 
authentication infomnation and sends it to a certificate 
device 200. A ticket discrimination information 
generating section 203 of the certificate device 200 
generates ticket discrimination information to indicate 
storage of a correct ticket from ticket utilization 
information and information in an internal state storage 
area. A certificate information generating section 206 
connects ticket discrimination information to low-order 
bits of a bit stream of the authentication information 
to generate ticket certificate information. The ticket 
certificate informatjpn is sent to the authentication 
device 100 by a communication section 208. The 
authentication device 100 receiving the ticket 
certificate information conducts ticket discrimination 
processing and terminates the protocol when the ticket 
certificate information is incorrect or the ticket is 
not to be authenticated. 
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m^^m} mmmm i o o <^^int«^^ifi5 102 
■AK mummc^^vmmmm2ooicm?> (sa 
1. s 3 2) o mmmm2 0 0(?3^>>-s/ bif^ij^is^^^fig 

mmu^m^u ^-^r-y humm^T^^m-t^ (ss 

SSI 0 0^C3i^.^^S (S3 4) o TSrSJmofc^^liE 

^cCV^l,CO©»-&^C^*, b :i/P^«^Ti-.5 (S3 

5) . 
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I — g 
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COO 1 0GQA«t«>7D-^^- 



(2) 

1 

Sr. i:lEIiEM^»#^;l«'3v^r. mu^t ^mm'^m.m&^ 20 
?/ hwsif^sr, i.w.mmm.iz.^'&ir^m'j-'^^y h 

[If 4 J ft 2 /iV n b 3 \z.mm<om^'f'^ y h 

±mm^'^^yhi^^y'M,\-i. ±^immmm.t±mum 
±w.^^y h^nms\t. 

m!&mmtM}t^r^^'yy\'^j^mmm^^nTi>^^y 40 

^y h^n^mmmmmmmm^t^mmt. 
yhm^mmt. ±w.f-^ y hmnmmmmm^mmm 

T, 7"Ji$'/ummxh^'^^y h^i^^-t^f-fry 
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2 

mtx^m&fo^mx. _hiaiiE§gw«<^iot LT, ± 
u^^y vm^^^<Dm-&\^m\^^'f-^y vmm'^m^^ 

-cfooT. ±mmmm.\t'^^yvmm^'^^^ii>t:. 

-^^yVmmm^^. -^^yVtmil^^^XlM'^-^y 

[ft 8 1 6 fC|E«<0«^^^<>- 5/ hi-^T'J^ 

9 ] 8 (c|E«c>«^^5^<>' 5/ h v';^7'^ 

[ft 1 0 J if 8 V ^ b 9 ©a^^^ 5/ h V;^ 
[it*]9l 1] if*J®8:^CVNbl 0<Dm^^'iry 

[ff*«123 mimst£\y\.l\(Dm.^'^^yVi^ 

y^T-j^x^ox. ±Mmmmm.\-t. ±.^iiku^wtt^^~^ 

b. jiiEiiE?gif«^^^s«. ±ia^'}rs' b^i^jsw^^i 
^^m.KXY>^^Mz.^yy vm^^Wi^m^'^x. _h 

[m^^s 1 3 3 mim. 1 2 b v;^-7^ A-T? 

fcoT. ilB^y?/ ^flJ3£^t$B^^^^;5S^figbfe^'>' 
S' h*iJ^tS«SrMt b. JilETOIf^S-Ct-rSt^ _h 

m^w^^fix^^^mmmnc-^. ctdMSr^-^bytt. 

1 4 ] mum 1 2 !'iV> b 1 3 (Dm^'f^^ y V 
^^r5,j>t, ±IE^^-> bfiJffl1S$8i:. JilBEI^SaS 



(3) 

3 

fcor, p, q !? , n = p • q-t?$)tl , DE 
= 1 mod (p-1) (q-I) (Dmm-dmtL^tl 

mmm^ (n. e) -cfoo. ^m^^^y vnmmm^'L 

f (du, L, n) Sr— ;^fRl'l4ia^t LT, ^-5^?/ hyjs lo 
t=D-f (du, L, n) -e-^;tP>^^TV^Si: ± 

-(itf (du, L, n) {C±SS*t©ten-e(DaC'C 
'<*-^'"> mod n t bTf^<5^5' MI5^tS«trti-e 

fcoT. p. q ;6S^^-e*> >? . n = p-q-e$)t), DE 

= 1 mod (p-1) (q- 1) (T^li'f^dSJifc^n 20 

Wtf#*S (n. E) T?$>?), JiiH^<5^s/ hflJffi1f$a*SL 
-C*>«9, ±|BiEB^^eH*««:S5^<Dttd u-t?*>>), 
f (du. L. n) Sr-;;&l^1tM»t bT. _h|E^<^iy 
h;&St=D-f (du, L, n) "C-^x. bnTV^S t 

-hlEliEM^Btl, fc^;6^C«)t + f (du, L, 
n) =DSrfi-»L. ^<D^ttSrfflV^T. ±|B^|iElf^C 

-C. T = C'' mod nt bT^^^s' hSEMIt^TSr 
nW-i- ^M"?-^^ y hi^ :^'rJ^o 30 

ptm^-Vh'O. &^xKMVXy = g'mo d p !&S 

yh-'Jimmm^ (y, p. g) ±?i^^yhm 

u-Qh^. f (du, L. y) ^-;^rRH4ia«t UT. 
ilE^'^'S' t =x- f (du, L, y) -C-^^e>tT. 
-CV^^Si:^. ±lEliEM^««. _hlS^liE««C (_hfB|iE 

hm&^m'T^c(ompx<D t\z.x^mmt. c<d 

fep^<D-:^|pj14Kl^ttf (du, L, y) =S:*g^t-t- 
SS^i:©ffip-C<?5aC'C"'^'''' modntbT 

P*5^^-Cfei?. S*fextC^bTy = g'mo d p *S 
S' b<25t5Hf (y, p, g) Xh*). ±W.'^^yhm 
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4 

ut?fci5. f (du. L. y) Sr-;^|B]ttlll^i: LT, 
±|B^<5^5' t =x - f (du, L, y) X^^htl 
-CV>5t^, ±|E|iE|gSe«. fct>A»C»t + f (d 
u. L, y) =x>lrth»U ±lS^liE«#C(c*f LT 

*j;£W^T<Srff»i-^K{c, C mod pOUSrffi 

[it*^ 1 9 ] nik-^ 1 4 /iV^ L 1 8 <^>®?-^<>- h 

h<arM1f«i ±.W.f'^yVW^mn.(r)lE^*&.^m 

#;S5T-C?fet3. Ji|a5">^-:y (n. E) t?*, 

IWS^IiE^^I*. ±|Ef^<>--> hiEigif^TSrfifen-eE-C? 
mod n = C| | M (IH-^ | ItttT?' h?IJ 

fcoT, ±mmmmmi>^cx$><!)s ±m^^y hmmm 

mt^TXh*). ±^^^ y W^mmmHi (p, g, y) 
fcoT. T/y' mod p= (C | | M) (lS-§- 

[ff*:S22j ff*::58^ev^b2 lOST-^-J^?/ 
±f2liEigS«l4. ±IB*^ltiE3geSr^liE-r5^c«)<D|^2<0 

i:. ±IE^2©|iEM1f#t, 9^<>-s/ h<2rM1f^ti 9 Jb 

[ff^3S2 3] lf*:^2 2(D«^^^<^?/ h^^;^7^A-r 



(4) 
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[if*:3S2 5j ^^382 2^iVNL.2 4©®-7-9"<5r5, h 
v';^7'A-Cfc<>T, p' , q* *5^^-Cfct), v = p' 
• q ' -Qih fit^l mod (p'-l) (q' 

-1) (Dmmmtc^in^t^K. ±.ummmm.(Dm2 

X = nio d u 

[if*:S2 6j m7kTS2 2t£\,^l.2 4(Om^^^y h 
X \ \ /J- = mod u 

fcoT, ±IEiiE?gSB©±iBM2<Z)|iE?g«««ISE^S 

im^m 3 2 3 ft*^ 2 2 /.CV^ b 3 1 h 
'^:^y'J^-QhoX. ±|B^liE^»«, ±lSt^IiE3Sa(0!i# 

2 ©lEigif #:i^la5&* b, 
JblE^ 2 (Ommm^k^^^i-i. -hlEU 2 (^^EEW^ t ± 
IE«liE^a#«1f « t J; t) ^ 2 ©IiEigit$ft^^figi-S® 

[^*:S3 3] ^*3®3 2com^=-^^5' bV^^T^ix-C 



(v, £) t-r^tt^, ±IE;^iiEMtt©m2©iiE 



[^2J 

r) = mod p 

^lwt' k±mm2<Dmmmmx = e''^±m\^. 

oV^T, fi/r,'' mod p = x«5iifc$*Vfc»'g-tC 
±|E^2<^!iEMW^*s:EbVNtipJ«-rSS®^^f"'5^S' b 

10 Eft*3S2 7] ft*9i2 2<D®^=-^'>-s/ hV^T^A-e 

fcoT. ±mmm'mM(Dm2(ommmn.m^^mt. ± 

la^2(OaE?^^»#^SJEbV^#-g■|*, ±iB»2©|iE?^1t# 

fco-r. Jil5iE5g^g©^2cDliEig««^^|iE^gi(*. _h 
f2»2£DiEE8gif^*^P>^tb^tUfctt«S-. ±ISl^a5lt$B 
C0^H*fF^-t-Sfefc©«$gt bT$lJffl-t-S«^=-^^5' 

[|«*:«2 9] ft*:«2 7 5&VNb2 8«Z)I1^^<^3' h 

A/-e*3>), JiiaiiE?gSB©||2 0|iE9gif«t^^iiE#S». 

[^33 

[IS:4 3 

p = x' mod y 

t b-c^1-sfl;^^'>'5' hv-^T^Ao 

30 [it*:S3 43 fi*«3 2(D®^^<>-3' hVX-rA-C 
(p. g, ij) t b^ 

T) = mod p 

m±^mft±mm 2 (omE^n ^ bx. 

[«63 

mod p 

40 y hi^^^T-J^o 

im^m3 5} »*:S3 2/^V^b3 4©®^^'^tx N 

i^;^-7"A-cfcoT. ±m^ummn-i±w.m2(DmM^n 
^^n^^. m2(Dmmmm.^i^^^mi^. ±mmmm 
m.<om 2 (omm^m^^mt. ±^m.mm^min^^ 

■si-r^mmt. ±mm2(o^u\nm^'o±mm2<Dum 

im^mSG] ft*::>S3 2:^iV^b3 4(D@^5^<r5' h 

50 sstt. JllB^IiE^e#^t^t$6^fflv^;fctl•££^^^^i-rs^I^c, 



7 

-c . jif&m 2 (DW-mm^^i^m i^^w ^ ^^fc±lEm 2 (d 

foo-C. ±fa^iE»«©^2<D|iE|gif«4^!g§[5tt. -tIE 
3 9 3 if ^Jg^^V^ L 3 7 lz.^m<om^'^^ y 

±fs^^ y h ^^n-r?> y h^i^^m t . 
mm'^^^^m.-^-^w^'^m.^im^fkh-^^x.^ 30 

[0 0 0 1-1 50 
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[0 0 0 2] 

it^#, ^-^^J^, lel^#, ^ffla^, T'y-i-f F;«7-K. 
[0 0 0 3] J; 5 i^iii^^y ^fr^iK m 

[0 0 0 4] ^<Dmm\cMi-^. m^mti^x. ^^jg. 

^£\,^m 2 <DtJfe3feS«. ^iEB#Oal«^<2tW-C# S J: 5 
l|2<O=eejfcS«§r^^iEUfc|g3co«ejl5SW05. 3ocd:& 

[0 0 0 5] mi cD«e*S^Stt. s' b cDf ij 

i^^^yyhtvx^^n^ti. m^^amf^mm-r^o % 
sfcfeictt, ^n^m'^^-yhiz.m'f-m^^m-ro ®^ 

!7- if©*pg^co@fw/jr i^mmx^ -So 

[0 0 0 6] Ld^L/jrdStj, w®;^ffi-C«. fUffl-TSfU 
[0 0 0 7] «a|;tti. fijffl##;eif «{cfiJffl#co#7C^ 

[0008] mmm^&mm{^^<:^ v~ v^Mm-ri\^ 
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[0009] m2 ©t^5feawf*> mx.imm^8 -14 

7 50 0-i-<2!t«{-:^$tl.SJ;5'^et>©t?fc!9. mn^lii 

[0010] u*^L3idSf>, r<o:;&^)£-c?tt 

(1) 5l=fT#tt^®#li^^5' hSr«^-e#:^CVN©-C. 

5. (.2) h(oWi7'^titkmf^(Dmm(Off%m^hm 10 
[ 0 0 1 1 ] m 3 (o^^Simtt. -eajxiiiRf^^e - 5 2 

5 1 8-^^$ft(c*^ttS J; 5^j:t®-efcij, ^H^oii 

[0 0 1 2] ^iiE<Ofc«){:iflJffl$tu5t.<^ 30 

?/ hSr!Iig^S{ci^-rS>^ffi>J5, «2£Otti5l5eEW^:IIl 
[0013] t¥5fe®^^««v>-f ti^t. 

[0014] [M5i«KW] ^tvb<ommi:m9iir^mm 

n.mt Ur. #M¥9- 1 8 8 0 6 4# (3p^9^7^ 

14B. ^;l:^1-;^ffi^s^ilg$^^Tv^So 

[0015] ::.<Dmmnm<D-^mmu>^^ h =^;\-^ 

n 3!i:*r;iS^|iElt# (5S;^LfcSLm) 

liE-t-So ffis-^MSEiffg mm) (D-m^^y-^-v 
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[ 0 0 1 6 ] la 1 ^#fig bTia»S«C»7'n b =«/u{;io 

m{ca<5VNr^iiEtf«CSr^^L (Sll) . r<D^tiE 
W^CSrBEWSBJc^fLT^lS (S 1 2) „ Um 

3SS^*SL^^;lS-^v^TSlJ®^liE^t«zSr^J5gL. mum 

#%Sr^feiiESWciMS (S 1 3. ,S 1 4) o iEK^^tC 
t^HE^a^sS^S LTHEe^aSaf-jiS (S 1 5, SI 

6) . ummm.\-tjt'^^'^mp<Dm^^-mmir^^h\z.i: 
1 7) „ p>^ls^Lv^®^(c<D;t(^, mmmm.(D^'smi^ifi 

M<^(^S&{-bfcj5SoT^M$tuS (S 1 8) o raise 
J*, lEmz-y^^^fltcf-^ V h t i:!iEKSe@^^t^d 
u*»f>, DSraTC-f-Sr t^dSpJlg-efot) (S 1 9) , :S 

►) (S2 0, S2 1) , mimmt^(om'^^mi-r^ 

ritciij. ^^^)e>i^fc1^— t';5^Srli^i-S (S2 2. 
S 2 3) o 

[0 0 171 ^<D;^i£{;iJ:n«. 'T^y V<r>i^mnmt. 

So 

[0 0 181 *^IIiE^«tliEI^^«/iS^tt-?tt(DiB5 

So r(OIiEM^^:fflv^s^liE^f^<D-el5(;l, e]^ 

lEK-f sr i:ds-e^s„ 
[0 0 191 r©J;5{-> r»M5gS^$ff©;^feSrffi5 

'<T^s^-rs :i h pTfg-efcSo 
[0 0 2 01 ir^i-s-e, ^fc©M]gS^lf-e(i. immua^ 
'f-^y hSri^^-rslf#SrliE§^i?eiCjgs::i(-J;t)s 

— «(c^*SitSrSfUit LTV>So L^i^L, H^C^ 

«^#«t-Srtt#x.t>ixSo fctxLli, ®^5tcD«* 

■^^mm^£ itmm(o^^ y h 7immmM<D ^ (;i#^ei-s 
ri:*s*>9 5s. ^(oxot£m^. mm&mx\-i. if<D 

'^^y V^nm^fi^nm LJ: 5 t UTV^S©*^^flJ»T■^S 
rt«s-e^/£V>o ^--^^ :i 5^-3 fc^-a-tc fix MWi^ 
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[0 0 2 11 ^LT. :i(DX^ti:mmKiS\,^X^ 3fe(OM 

rt^^Srfft^-r^r t/ibtcf^^K^ti-, ilie>tvru*5i: 
[0 0 2 2 J rtvf*. '^J;t«. fiJffi*;85^ofe^'^s/ h 

;K^:5S^M$n-CL* 5 r i:tr«*LTVN^e 10 
[0 0 2 31 Sfe)t0^if?(cigffl-t-S«^Sr#;t-5 

10 0 2 41 rrt?. Am'omnti.x. mcAmvtc 

;i^JfE^:cDi?-el^AJ#■e#;'^v^^<5r5, htc^LT^j, A» 20 
-e/^v^^<>'5/ h-e©A»i*-et'fev^;i.5, AWSrJgS^iT- 
TV ^SIiE|g3S» S^#(-A^^•5 r St -t-Si:> * 

*i~t-SA»fS^S:^5it-r^x«, W»^{c^^jgLfcA»ia 

[0 0 2 51 r<Dj;5{-. mmmtii. m.m\.iioh-r^ 

[0 0 2 61 L*>L. 5t»MJtSW(w*3V^T^^. rroi 
[0 0 2 71 

[0 0 2 81 

[iuas:»p^-t-.5fcj«)»^si ±^<ovkm^m^i-^tc 
mmtim^-i-h'f-'^ry hm^mmKm^^^^xmi&iri,^- so 
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^y h^m^&^t. mmmmt^'^^y hm^mm^nm 

li. mmmmmmmm^w^^t. 'f-^yhun^'m. 
<>ti<khmmmmm^mm.tf-^yYi)^h'?-^y 

[0 0 2 9] r<D«^K^;l*3v^T^*, tmrnm.*^. '^^y 
hm^mm^^-^^^x. m-mmn^nf-jry vnm-^ 

[0 0 3 0] 

[0 0 3 1] [nis^j 1 ] 0 2 \z.:^w^<Dmmm i 

^t^jVNp) lOOiHEI^SS (SEM^^i'J.VNp) 20 

0 ii-^^y hVi-^mmzO O i;i^£>^£S. 

[0 0 3 2] 0 Ott, ^^SEI-e^'^s' hcOIE 

^i4Sr2|=ij^-r'5^'>-5' h¥ij;£si5i 0 1 mumu^^ 
mo 2k. m.m'^m^n i o 3 1 , mmmmm 

1 0 4 . mmm.'^m.'^m.'^nu i o 5 1 , mmu i 

0 6 t Sr-&A/-C«^$^xS„ 

[0 0 3 3] — iiEM^e2 0 Ott. |iE5g^e@^ffi 
«iS:i*?f|52 0 1 'f-J^-y V^nn2 0 2 ^^5/ h 
¥lJ^W^^fife^fP 2 0 3 t , ^Ilffl^^^gP 2 0 4 t , EE 

mmmLmi-U 2 o 5 1 , sEegw^^^as 2 0 e i , i^as 
i^m.umn 20 7 1. mmm 2 0 s t st-^A/t^^ $n 
So ^<c*54feiiE^a 100 <DiiEK«^^^s«ij 103, mm. 
mm 200 ©liEigif $R;^gi5 2 0 6 tt. ^ti^fimmm 

«2 0 0, tiliE^Bl 0 Od>e>3eie>tu-C< -SMIiElfffi^ 
[0 0 3 4] -itc, -^Yy V^m^2 0 2\Z.\i.f-^y Y 

^=^^y h\mft:--t^'^^y vmmmmitti^'^^^ 

^^-5„ ^^Z?' b«:i^^2 0 2 (citt=S-5^<>'5' h 

[0 0 3 5] rr-ctt, mmmm.2oo\ii. i^sbot'— 

- K<^ i 5 =^j:S««:{c J; «^ $ ns. 
[0 0 3 6] *fc. ro|g|£'WT(*WT»J; 5(^x 

h t imn^kx^i^. 
[0 0 3 7] 
[*ll 

^^^^-S/ h : t=D-F (n, L, d u) 

D : ^^2/ 

d u : iE|^^«@*<0©«1f ^ 
n ■■'^^y 

F : ^m^>&.-^\^mm 

EDS 1 mo d n 
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Wii-. E, n, L-efc5„ F«— jS<D/^s'^/3.||^^cJ; 

[00 3 81 ;*:^ig<omiiE7'a b a/WCOStS&SrHI 3 \z.7f^ 

^yV ^-^mm. 3 0 0 J; iiE§gS« 2 0 0 b 

^glSESg loot tiEBJiga 2 0 0 t ©ffl-e^iET' 10 

[0 0 3 9] gl3{C*3V^-C. MSET'ci h *-f 

^lE^* 10 0 (Dnw^m.^^^ 1 0 2 ^liE^f # t 

LTSL»CSr!^LiiE?g^»2 0 0(;i5g-5 (S3 1. S 
3 2) „ 

(00401 ^iiEtt«SrS(t^ofcliE5gS® 2 0 0 

^^jrj' Ymmm^.^^^m^mi-t^ (s 3 3) . 
[004 1] 9^'/s' vum'^m&mi^m (s 3 3) 

S2 0 o©iiEKif^^^giJ2 0 6 1*, *^s(;lffiv^58^^e 20 

ffi«dud^P>. £iT<Off^(cJ:l9»m-rs (S4 1) , 
[0 0 4 2] 

mil 

t +F (n, L, d u) 

= D-F (n, L, du) +F (n, L, d u) 
= D 

^^Z?/ h¥lj;£ftS^S|52 0 3». IbV^^^^s/ 
^Sr'»^tb-CV^-5^:t Sr;^-rfcit.0^ys' h!pj;£ifaM 30 
Sr. ^^^ix b<%i^SS2 0 2(7)^<^5/ hflJfflffi#*5j;TJ?|^ 

a5^^«iisitffi«(Dif«d>p>^^i-s (S4 2) . umm 
y vm&'mmM^m^x. (s 4 s) . ^>5-s/ mes^w^ 

[004 3] 

[|gc8] T= (C I I M) ■> mo d n 
n%>(%\Z.l^^ ^mt^ (S4 4. /£i3|H-^ I 

[0044] 40 

T= (C I I M) ' (C I I M) mod n 

[0 0 4 5] ^!iE«$B!^^g|52 0 4»*. SL^xSr 

^£j5gbS5 2(^MIiEtf«t-rS (S4 4) o 

[0 0 4 6] '^^yvmm'^m.ih%i(r>^ummix 

lis ffifta52 0 BliiJ: t)*fe!iES?«l 0 OJCj|^e>n'5 (S 
3 4) o S^S-^i-S©!*. f'^J-s' hiiEB^^t$a^SiEUV^t 
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[00 4 7] T t X SrS:(tSlofc«IIiESI« 100 tt^'^ 
SN5|J^*3;a (@3<DS3 5) S-^T5o 

[0 0 4 8] ^-Jr?/ b^iMJ^^DiSI (|gi3<OS3 5) 07 a 
— ^ir— h^0 5icS^-t-, |115{C*5V^T. ti^iEiS^lO 
0 CD|iEKf*^«l!iEgi5 1 0 4J4. ^^hMz.'f-'r y MEg^tS 
#TttiEM■|f^t^||iESP/55^%itbTV^59^<5r?' h<2rMt»$ft 

[0 0 4 9] 

[^1 0] T= mo d n 

5 (S5 1) c — i6:bfc»-a-fcfi, $e>lc^<^5/ h!|£iJS 
W«MSrttaii--5 (S5 2) „ J!fc{C. ^^Jr-y h!flJj£*Bl 
0 Itt, M<Dl^5gSrfci:l;i5^<;^5' VBi-nf-^y Y\cm& 

*^if5*^Srfij«-rs (S5 3) o m-^(r>^^. ^cof-fr 
y hSr^tiEbT^V^»-a-{c«, SEI^If ^ft^^lfP 1 0 3 

IiE5g^e2 0 0©(^gCi^^(D^MSrm55-rS1f#*i 
Srf^^L-C. x(OymC-m^-t^ (S5 4. S 5 5) „ 

$a6«rfflV^•C*=€SrbfcttpSrf^^i--5 (S5 6) o 
^^h.fcp\'X. ilftSBl 0 6{;iJ;t)|iE§gS«2 0 O^t 
j|IC>tt-5 (S 3 6) o 
[0 0 5 0] —^^ ^^^s' MiE|g^f«^SELV^t>(0-e/i 

J*. h^i/WSrll-Ti-S (S 5 7) , 

[00 5 1] •^'Stn'^<3tzMwmm-i.nuwm: 

(13 3(05 3 7) SrffPc 
[0 0 5 2] (03058 3 7) ©7a 

0 ©iEigif #^!iEgi5 2 0 5 1*. jgl ?>tufc||2 (D|iE?gtt$8 

[0 0 5 3] 
[ilcl 1] 

/O * mod V 

^lUff^ X t -s:-r .5 t* 5 «^Sr?t^-r 5 ( S 6 1 ) o 

f*. :7'a ha/USrJ^T-rS (S6 2) . ^ELV^t>®-efc 

(S6 3), (^S|5^flg®Ji»^ 2 0 7 Ai<OI^S^(CJc£;C 
-C|iE5ggB2 0 OCOI^gpt^flgSr^ML. ^<0)g:IISrM' 
tt-S (S 6 4. S 6 5) . !IWtt«^^SP2 0 6fi 

[0 0 5 4] 

m.\ 2] R= (C I I M' ) mo d n 
©ti-^lcit), aE5g«$ftR<Sr^fi£i-S (S6 6. S6 
7) o Rttil^iSIJ2 0 8{;iJ; !?^liE$gfil 0 0^cai^i^ 
5 (S 3 8) o 
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[0 0 5 51 R%:^ifmorcmmmm. i o o umm 
mmumm (maws 3 9) ^n^o 
[0 0 5 61 wLmmmmtfiim m3<Ds 3 9) ©p'n 

[0 0 5 71 

[Sfcl 3] R' mo d n 

if yh Mt> . fttOJctfeiE^a 10 0 dS^fiE U fc^Efflf^ 10 
Ct-i6:-rSit<Sr^^-f-S (S7 1) „ fitM-C#fc» 

Wr^M^ii i:-©:-rs«^if5*^Sr*t^b (S7 2. S 

7 3, S7 4) , mmi)^'c^±m'^iai. ^^htht^^ 

-tr;^S:ll^-t-S (S7 5) „ \^-rM^<DVm.\z.^^\. 
iPtu^iV^ (S71, S74, S76)„ 

[0 0 5 81 mmm 2 ] :^^m<Dmmm 2 

[0 0591 *^egollJfe^J<Z)«fiK^^<>- y h (D^m^ 

m\tmmm 1 h i^^-cfes^s, ^^iiESg 100 «a^6<) 

[0 0 6 01 iJiTt?(4. 9 9 7^7^ 

1 8 Bom^^cDM-eiftMi-So '^cjs, jsi:, mao^f 30 

[0 0 6 11 ^'J-?' bc^^^^-yb^UfflW^Lfi, 0 9 CD 

^'5^5' Mi, ^<;rs/ M D/4S0 0 0 0 5ic^i-t>o-efc 

[0 0 6 21 A»NF©^liElcoV^■CSiBJi--5. 
M^m^mmm. l O O «^tiE1S«C tif;!, A»-e*> 

^:Lb^hhf^-r^m^ummw.2oo\z.m^ (S3 40 

2) . 

1 0 0 6 3 1 0 0 '^^y vm^'^mA^ 

fHSikWF*3^>55-^4ttTV^.5o SEg^tt^^^SP 2 O 6 14. 
MSrClCjgJ^L, 'f-^yVm^mT>\^ii^m^^M\. 

«x 1 1 t.jclfeSE^ai 0 OtcSIS (S3 4) o 
[0 06 41 tiliESIffl 1 0 0 '^-^y hUmm^^i^ 50 
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h-e$>S t¥iM$tuS (S3 5) „ 

[0 0 6 5] ^r-e, 0 o(o\^mm^m.'w. 

-To A«t?^Bt^M*5|B^$tu.5„ BEigitffi;^ 

1 0 3 14. r 5 L-T^J5K Lfc w 2 (O^liEW* x 

(cjg^ L, tfeiiES* 10 0 (om^>^m. s\z.ii^m^^m 

bfcffi/otr^^LT. liE5gS«2 0 0-^3312) (S3 
6) c 

[0 0 6 6] mm^m. 200 (Du.m'^mJikmu 205 

(4. l^gB<^^^!)»Si52 0 7dV<D[^^(;iJC&D-C. 
S2 0 0Ol^g|54^SISr^M-rS (S3 7) „ 

u^mo:>m^^mi 2ic;^t-« AWoiRt^M/J^ia^^ 

f^ias^fiio^H, i-jfeip*>AJ#iE»©i^^^M' t-r 
So njs^ji ti^^jc, mmmm^^'S62 0 6tt, m' 
(Dm.^mmmm<o}fy hmcm^i^x. ^^^y^msm 

T^^lliE^e 1 0 0 (cjgIS (S3 8) c 

[0 0 6 7] ^wmm. 100 \tmmmnR(om%:^m. 

b3t'fo©i:mbT^^i^«, :iEb< l^iasftftiiJS^H^H 

[0 0 6 81 mwin(omu^mm-r^o 

[006 91 (4b*{CtfeIiES« 100 fmSEW^C t t 
(S 3 2) „ 

[00 701 mmmm 200 co^^jr 5/ hspj^^f #;*:;«a5 
2 0 3 ^■i.'f-^y h^\MmmA^±^-r^. wwnpomo 
p^^^mi 3Km-r. mmmmL^^U2 0 et*, mstc 

{c»^b, ^^^i' bSHBSiDiciSSi&^SrifSb, ^^'^s' 
(S 3 4) c 

[00 7 1] t^^sEsa 1 0 o<omm'^mmi£^ 104 

^»iEbV^»-g-(c«, ^-^-y hJflJ;£gi51 0 1 ^^^^--jx b 

i>5^e>, ^^x<o\i*,m<Dmm.ii^'^mf£'f-^y hxi^^t 

m-^^iX^ (S 3 5) . 
[00 7 2] m^. iEMIf a^^SC 103 ttSEI^igfi 2 
0 0<Ol^faJJt^fig-Sr^M-r-5fc«>»1f^*i Srf^^-t-So ^ 



17 

(Dp^^^m 1 4 K^-to n^^^^. wsir^s t m^^rais 

IB^^H'So BEMffl^it^SC 1 0 3 I*. :i^i6;^5 

<^J£b;t#:iO Sr^fiK-rSo p{*liEWSm2 0 O'-irSIb 
tx,^ (S 3 6) o 
[0 0 7 3] |iEM3S«2 0 0(O|iEM1f$R<^||iEgiJ2 0 5 

figftiJMSP 2 0 <Drt^{CiS DT. iIE§^S« 2 0 0 © 

^iltiESia 1 0 0 JcSI^ (S3 8) . 

[0 0 7 41 mmmm2 o o<Dmm^mku^i o 4(i 

?fetL«<D<5^- htrM(t-5 (S3 9)o 
[0 0 7 51 LMI&m 3 ] JIJS^J 3 -t?H. HJ^^O J: 5 

[0 0 7 6] S*WI-t*:$:SIJ£MIO«fiK^^<^5' h<0^i 

^ 2 0 2 a dSlS«$tt-CVN^^;6WiS, HI 1 6 {;ifeV^ 
[0 0 7 7] fiJffi«f:i|5ii5:a^§r^A-rSi, ttCfefcfiE 

U'^mmi»mmm^^i^. ^(Dfit^niJ^i^^ 202 

[0 0 7 81 lHl^#<^#iJ^^(cf*?iJffl#{i. |iEigS«2 
h«;tS«3 0 Otcit), IiI||fe#Sr*gSLfc±T?, Jt^BE 

loot iEgg^g 2 0 0 1 nw^mmz^'a V =i/\^t^ 

[0 0 7 91 ^iET'a h =/W-eii. ^liE^S 1 0 0 dS. 

mm.'snmih\.x=mic^^f^\.wm^m.2 oo^m^. 
[0 0 8 0] :i?immm<o'^^y vummm^^^m m 

3 CD S 3 3 (cSttiS) <o:7n— bSrH 1 7{vi^-ro 
01 7^;l43V^T. liE?g^«2 0 0O^</3' hH^J^If^^ 
2 0 3 iO[Hl^#»^<>' h LfcF^^aS^^^ 

b¥lJ^1f^M{;iiH^-r-5 (S 8 1~S 8 4) o 

vum^WiT^±^\^ (S8 5) . mwsnm^^U2o 
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4:S5^2(D^IIElf«zSr^^-t-5 (S8 6) o T i % (4 

iiftl«2 0 8};iJ:t)tirtiEi£Si 0 0t;iiiiP>4x§ (S3 
4) „ 

[0 0 8 1] T t z SrS(t5lofc«||iE^a 100 Yi.^^ 
y V^n-^^m (El 3 (D S 3 5 (;i*f;S:-r) SrtT 5o 

[0 0 8 2] ^-^ly hW^^aa(;?7t3-^-r- h^iai 

8 {C^^-To mis (c;fcV^-C. «lliESE 100 ©fiEigif $R 
5 (S9 1) c ^^^-s/ MiEiaif«:5SjELVN»-g-{c(4, ^ 

(S9 2) o ^^s/ K*lJSt»«MtJi»4[H)|»:#®a>?lHim 
;^sfSSt$^^•rv^^o 9^<>"3' h^iJ^lfP i o i [^^cDm^ i 

(S9 3) o ^^VL. ^^^i' hflJffl1f#L<DP^SSt 

t , :i (om^mw 10 0 -c^^iE^fg-cfc 5 t 
«^1 0 IdS^lMbfcW-a-t-ti. iEl^lf #^^35 1 0 3 
\ms^mm.2 O 0<^)|^giJ;t^^<D^MSrit*-r-5l»$R// 
f^^-rS (S9 4, S9 5) o M^I^S^tbr. 

20 ^LT. ^IS^J 1 i: l^il<7);&i£-T?, n^^^VXm2(D 

mmm^p^i¥^v (S9 6. 397) . tiEgg^a2o 

0--i:j^5 (S 3 6) o 

[0 0 8 31 mm^-^^ y b bfc t # (ctt^i 

9— ^aaSrtr^iP (S 9 8) o 

• [0 0 8 4] p^^\-f'!s^^tiummm2oo\%^um^ 

[0 0 8 5] f^^it^m^'s.mm<D7u—'^^-h^mi 

9 fc^-r. m 1 9 ^;l*5v^T. Eig^g 200 (ommmn 

mS:^ 2 0 5 ^45@lfc^^fc® 2 (OSESgit^ p s-^^iKE-rs 
30 (s 1 0 1) . iEv\^^h<r>xh^ ^ bummx^tim^ 
Kit, \f^^vtmwmm^n<r>p^miz.f^^\:^x. mm.^<Dm 
*)^m^w^imh\^. ^(Dji$*^M' t-re (8 10 

2~si0 4) , fcttt, HJi-pij 1 1 i^^co:&-iS-es K 

MiS«2 0 0{4|iEI^«F«R<Sr^^£bT. i(^l|IEieei 0 0 
(S 1 0 5. S 1 0 6) o ^T^S'T'S 10 1 -C:^ 

m\^^^\^ftLt^K\-^^y~^mfinf£t>f\^^ (s 1 0 

7) o 

[0 08 6] &M<Dmmm. i o o wtftf^f*. njfe^aj i 

40 5o 

[0 0 8 7] immm 4 ] 4 -C^, 

[0 0 8 8] *|IJfif!jT?J4. p ^s^m-efc Y) , G;SS|tiic 

[0 0 8 9] 

[^14]y = g' mod p 

tt. (p, G. g. y) ■b'^'^^ y V<t:m 
50 mmXi>K). x^^<^s' h8}«1t#t-rSo (P, G, 
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[0 0 9 0] '^^'y hlt'^^-y h!^'^mm.y. 

[0 0 9 13 

[^1 5J t = x-F (d u, L, y, p) 

[0 0 9 2J *fc. ;gliiESe<Di|#ti^*>P>*?i-*j<Dt L 
T, ±1E (p, G, g) f**iiitLT. 
[0 0 9 3] 
[^1 6] 

77 = mo d p 

[0 0 9 4] mm^\t.G^mmmti.xm^\^ft<!). m 

[00 95] ;$:%M<75^liE7'u h =i/K©«B&S:|g 2 0 

t +F (y, L, d u, p) 
= x— F (y, L, du, 



20 



10 



* [0 0 9 61 {4Dfe{:::?iJffl#l*x :iivd>hmmT^'f''fr 

[0 0 9 7] m 2 0 {CJJV^T, r <^^|iE7*n h n/Wt? 
^.-ri^Umm l O O co^SEIff^^^as l O 2 SL 

LTiIMS«(Ci^.5 (S201, S20 2. S20 

3) » 

[0 0 9 8] mmmmc^s:ifm'otcummw:2 0 0 
11. ^-^iv hmmmn^^^m^mn-r^ 020 

4) c 

[0 0 9 91 haEKi»ffi^j5g*Q;ac7):7P— 5^-v— 
^Srlll2 itc^-r, 112 1 ^;l43v^T. *-rtEE?g^a2o 

#©p. *5J:T^fiEig3^«@^W$Rd u*^P>. VXT(r>V(% 
\ci.^nmt^ (S 2 1 1) . 
[0 10 01 
[»1 7] 



p) +F (y, L, d 



p) 



^^J' hW;^1f«^^a52 0 3«, lE.\.\^'^^y 

^^-^^-s/ ^©#Ap^t^L^l^g|J^^ffi©^f#*^e>^^•t- 
s (S 2 1 2) „ 0 6{*, liEMIff^t 
bX, £tT©1ii[Sr4^!g-r.5 (S 2 1 3. S 2 1 4) „ 
[0101] 

[^1 8] T= (C I I M) • C mo d p 

[0 10 2] 
[^1 9] 

T= (C I |M) . C'C"'-'-*"" mod p 

^iElf ^^JSKSB 2 0 4 ttl^^f;:^^ r ' Sr^fifeU 

T. 
[0 10 3] 

[#:20ljc = g'' mod p 

Sr0 2»^IiElf^i:LT«liiES«tC3S-5 (S2 15, S 
216. S205)c '^^y Vm-&'^mM.\cK^>^m% 40 

mMm 1 ~ 3 1 iD^-cfcSo 
[0 10 4] mmmiihm2<T>mw^mix\-^. aft^Hs 

2 0 8{CJ; t)|^l!iESSl 0 0{'2l?>n.5o 
[0105] T t X ^S«t^ofc<^|iE3g« 100 {i?'^^- 

h¥lJS*a3a (112 0©S 2 0 6) S:^t5o 
[0 10 6] ^-Jr?/ hH^j;^^a<o:7ci-^^-hS-l2l2 

2{;i^-r. g|2 2^c:*5v^■r, «lliEilg i o o ©Hl^ffl^ 

[0 10 7] 

[^2 11 T/y mod p= (C I I M) • C'/ 5K50 



y' mod p 

(S 2 2 1) c -S:bfc»-g-{cf4, ^^^-s/ hH^J^asi 0 
\\t^h\z.'f->ry\'m-&'^mJi(r>n^f)^i>. ^^yhR 
XJ-'f-^y htcM3*#(te>tbfcrtg|5<^^*sr<D^fiE§gei 
0 0-CttliEL■C^V^t>©^^^f 5*^SrH^J^i-'5 (S 2 2 
2, S2 2 3) o flJ^cDJ^m. hS-^IEEbr 
^V^»-g•{;U*, SES^If «±J^^H5 10 3 t:itiEWSB2 0 0 

iiS-rS (S 2 2 4, S2 2 5) „ ^ErbT, :icDli:{c*fL 

Sr^2<0^iiEttat Ur, iifig-t-'S (S 2 2 6) o 
[0 10 81 
[SC2 2] 



(0= (>r I I xi) 



mo d p 



p«jifigBl 0 6{CJ:«?!iE5g^«2 0 O'^tSlfetbSo 
SriS^T-rS (S 2 2 7) . 

[0 10 9] «>C{Cp §r§:(tSlofc|iE?g3SS2 0 0«I^?S5 
^mm^Vm (132 003 2 0 8) Srff5o 

[01101 nw^mm.'^^may-yu^'j-^— h srm 2 

3{C;^i-o EI2 3tci*5V''T, liEig$ie2 0 0( 
«l!iEgB2 0 5«, 2ie>tt;fciS:i§:lt$B^:»t,, 

[0 111] 

[IR2 3] 
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o/ 1} mod 1?= ix 

(S 2 3 1) . IEbVNtj<D-Cfc^:i tiSSJt^-Cltfc 

ffs^iiKmpm^ 207 jsj. m <^i^a5H^^<o^ 

;S5^ML, ^©^gmSrM' ^-^5 (S 2 3 2~S23 
4) o 51^:©^:^. jEL< ;'^v^rt;5s*|J?^bfc» 
-g-fc^^-g-tclS, T^n h=i/W-Sr»l-T-rS (S 1 3 7) c 
[0 112] Ummm±f&U2 0 6 J*. M' Offitr^iiE 

^tVX^fS.i-^ (S2 3 5, S 2 3 6) „ 
[0 113] 

[^2 4] R= (C I I M' ) • C mod p 

mmmi ooKiSkhiv^^ (s 2 o 9) „ 

[0 114] RSrsitstofc^feiE^ei 0 ott. umm 
^tfeiiEiaas 2 1 0 m2o) ^n^o 

[0 115] mmmmmm^m(D-:7u~^^^h^m2 
4 m 2 4 ^c*5v^■c, umm^^mu i. o 4 j*, 

[0 116] 

[1^2 5] R/y' mod p = (C | | M' ) • C" 
/y'r mo d p 

mm^mmmm 100 ds^^g bifc^sEit t 

•f-Sri:§r«fe^-r5 (S2 4 1) „ Ct^T't fc^-^f*. 

nm.ti t—^-t^a^if^ti^^mmi^ (S 2 4 2. S2 4 
3, S 2 4 4) . mmi^x^tcm'^Ki-i. &ifohti-ft^ 

— tr;^tr*t#1-S (S2 4 5) o V^-f^^>4^«^ii^^C:^SjC 

friPtb'iVN (S 2 4 6) o 
[0 117] 

[01] ia»s^^if©*!i3a^ift?g-t-S7D-^^-h-t? 

[0 2] mmmi. 2, 4<Dfl|^iS:^#:t LT^I-t' 

[113] mmmi<D!&m±ii^^mm-r^7XJ-'^^- 

[1114] Hifte^J 1 co|iEiaSlffl<^^<J^ 5' MiEK<»$a^^S 
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I \ u) ' X^yj]"' mo d p 

[05] njfe^iii 1 (o^mmm<^=^y y v m^am-^^ 
[0 6 1 m^m 1 (Dummm<D^mmMii^m^m. 

[0 7 ] 1 O;g||iE^«(0liEigt»^«lliE*!iaiSrSi 

[0 8] illg«3J2coh — ^ VCO^Ufflcoi^gp^^figSr^-t- 

10 0-e$>?,c 

[09] ^<^s' h#*Dlf#<D:«SSr*-r0-efcSo 
[010] A»^lc h — ^ 

hi|siJ^tS«MSr^-t-|llT?S)5<, 
[011] A»m-?fea^d-^ V—^ 
e M Sr:^-r0-efc5„ 

[012] A»^© b— V(^(^gi54^^^;^-t-0-Cfc 

So 

[013] Vd^t>?$r^=l;^(C5i^tt^^ 

20 [014] W«^{;i3fe=t=L^*^e> h-^ V(wJ|P>iT,Sttf 

[015] wi^m<o h-^ >-<Dl^a5^^^^*i-0-Cfc 

So 

[016] %mm^(n>m^^±.^h\.X7T^-^-:fuyi7 
0-e*>Sc 

[017] ^i£^J3<OiiE?gig«<0^<5r5, MiE5gtf^>£ 

[018] ^jg-pij 3 (r>imimm.o>'}-^y Ym-^vm^ 
30 [019] 3 <DiiE?q^e<?3i^gi5:K^^jE*aa«r 

[02 0] ■mm^<r>^m^^^h\^x7fi-ty^—f' 

[021] %mm^<r>ummm.<r:>'9-^y vmm'^m.^ 

[022] "mm 4 tf5^tiE^*©^<;r 5, hipj^^aasr 

[023] S3g«aj4 (0|iE?«SS©(^SB4^^Hff^a^ 

40 [024] HJS^FlJ 4 ©^liE^ff ©iE?^W#i(^|iEM;aSr 

[iRF-^<Dtii|g] 
10 0 IfeliESa 

101 'f'^yvm-^n. 

10 2 ^aEtSiS^giS 

1 0 3 IIMffi«^95 
10 4 SESgW^^liEflJ 

2 0 0 liEM^B 

2 0 1 sEi^aiaswtf $R4*i^ei5 

50 2 0 2 '^^-yV^m^ 
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2 0 2 a i3^>^ 

2 0 3 Vm-^'^m^^U 

2 0 4 mm.'^mL^^^ 
2 0 5 um'^mm.^ 



(13) 



* 2 0 6 

2 0 7 

3 0 0 
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